$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/d61c991b-64f9-3235-b216-505ad7042389.roa File: d61c991b-64f9-3235-b216-505ad7042389.roa (raw, json) Hash identifier: BmQIGGDAuErCT4dedJevCbg8eNg1rrKyjuCtQKu2unw= Subject key identifier: 29:4D:E4:CA:82:3D:C4:40:8A:A8:D1:CF:92:1F:45:33:2E:12:1A:A0 Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584D6DE78FB0EAB51FF3043A7E40 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/d61c991b-64f9-3235-b216-505ad7042389.roa Signing time: Tue 07 Apr 2026 16:51:15 +0000 ROA not before: Tue 07 Apr 2026 16:51:15 +0000 ROA not after: Mon 06 Jul 2026 16:51:15 +0000 asID: 32723 IP address blocks: 216.6.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:e7:8f:b0:ea:b5:1f:f3:04:3a:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Apr 7 16:51:15 2026 GMT Not After : Jul 6 16:51:15 2026 GMT Subject: CN=45f64704-6719-4a6c-b721-48310da93dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4b:86:35:3d:76:ef:fa:64:67:83:ec:fe:1b: 67:14:40:a1:34:a3:b3:dd:f2:24:67:50:06:09:70: bf:bb:a2:92:44:08:d9:6b:c0:cd:91:29:32:71:65: 86:1e:8e:0d:28:e7:ce:d2:e5:10:72:63:42:bd:50: 5a:62:37:a7:03:96:a4:45:c1:24:de:f8:f7:6b:1a: 95:9b:d4:e8:9d:7d:bf:5f:e3:81:36:21:40:2d:cb: a9:51:58:1d:3a:65:f1:eb:13:2e:b8:67:d1:a5:5d: 60:3d:c4:0a:c3:8a:08:bf:aa:f8:fc:33:67:69:87: 5e:af:3b:0d:7d:50:ce:20:48:e6:fa:b5:36:60:99: c3:45:95:03:70:0b:f8:32:5e:63:4f:23:d3:37:22: c0:5f:e8:4b:06:b1:77:9e:15:16:55:86:0f:c1:c4: b5:60:8c:16:08:d4:13:bb:91:ba:a9:5f:a5:33:11: ad:3e:a7:8a:95:ed:8c:20:0f:f4:49:37:7c:60:e4: 3f:67:fd:b4:41:ee:97:79:2a:70:5b:05:f8:b1:6c: 70:29:6d:cc:e9:ec:04:91:3a:d2:18:61:31:32:be: 32:63:78:79:29:7a:d1:9f:1f:7c:4f:9c:c8:3f:d4: e6:93:72:41:f0:25:86:9c:fe:13:9f:73:75:fe:ce: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4D:E4:CA:82:3D:C4:40:8A:A8:D1:CF:92:1F:45:33:2E:12:1A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/d61c991b-64f9-3235-b216-505ad7042389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv4: 216.6.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:fc:61:b0:b1:09:9d:2e:01:c1:f9:b2:0b:79:91:40:24:8f: dc:42:d6:33:e6:ef:d6:37:69:25:82:a4:15:e3:54:17:4e:b2: 48:66:55:22:52:ae:8d:e8:12:6a:56:e2:4d:7f:e5:36:e1:45: af:42:10:18:ef:51:31:83:cb:16:60:9d:9e:4c:10:dc:4f:ed: 93:98:12:b6:2e:07:ac:28:be:a7:2f:1c:9f:92:d2:4e:18:7a: a0:94:d3:a1:2e:b2:60:2a:d7:11:b3:0d:7a:5e:06:7f:6b:d6: 09:9a:27:16:32:db:27:b3:df:06:74:38:db:bc:1b:22:05:43: 1b:8b:0b:3e:ad:af:51:25:46:25:68:5d:a2:5f:78:17:27:a9: a3:02:5c:19:54:65:02:4b:ba:c7:6c:22:30:28:84:e2:a6:7f: ed:79:7e:a9:7f:69:66:ee:e8:38:a3:3e:f8:32:9c:ee:e3:49: 22:c4:4f:04:20:96:3a:06:9a:2d:c9:6b:c0:a3:71:8d:70:67: 85:db:91:5d:8a:53:d5:1a:c0:02:74:62:79:58:e5:de:75:f5: 8e:b5:49:95:84:48:22:5c:ae:09:09:fc:b3:73:87:5b:34:c1: c3:11:09:50:88:6d:ee:bc:e8:3e:55:bc:e3:6c:53:2f:2e:ac: f6:06:f3:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1t54+w6rUf8wQ6fkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI2MDQwNzE2NTExNVoXDTI2MDcwNjE2NTExNVowLzEtMCsGA1UEAxMk NDVmNjQ3MDQtNjcxOS00YTZjLWI3MjEtNDgzMTBkYTkzZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0uGNT127/pkZ4Ps/htnFEChNKOz3fIkZ1AG CXC/u6KSRAjZa8DNkSkycWWGHo4NKOfO0uUQcmNCvVBaYjenA5akRcEk3vj3axqV m9TonX2/X+OBNiFALcupUVgdOmXx6xMuuGfRpV1gPcQKw4oIv6r4/DNnaYderzsN fVDOIEjm+rU2YJnDRZUDcAv4Ml5jTyPTNyLAX+hLBrF3nhUWVYYPwcS1YIwWCNQT u5G6qV+lMxGtPqeKle2MIA/0STd8YOQ/Z/20Qe6XeSpwWwX4sWxwKW3M6ewEkTrS GGExMr4yY3h5KXrRnx98T5zIP9Tmk3JB8CWGnP4Tn3N1/s7t2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClN5MqCPcRAiqjRz5IfRTMuEhqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvZDYxYzk5MWItNjRmOS0z MjM1LWIyMTYtNTA1YWQ3MDQyMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2AaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL8YbCxCZ0uAcH5sgt5kUAkj9xC1jPm79Y3aSWCpBXjVBdOskhmVSJS ro3oEmpW4k1/5TbhRa9CEBjvUTGDyxZgnZ5MENxP7ZOYErYuB6wovqcvHJ+S0k4Y eqCU06EusmAq1xGzDXpeBn9r1gmaJxYy2yez3wZ0ONu8GyIFQxuLCz6tr1ElRiVo XaJfeBcnqaMCXBlUZQJLusdsIjAohOKmf+15fql/aWbu6DijPvgynO7jSSLETwQg ljoGmi3Ja8CjcY1wZ4XbkV2KU9UawAJ0YnlY5d519Y61SZWESCJcrgkJ/LNzh1s0 wcMRCVCIbe686D5VvONsUy8urPYG8x8= -----END CERTIFICATE-----Generated at Sat Apr 18 02:26:52 2026 by rpki-client